Re: Minimum password length

["Jim Franz" <franz400@xxxxxxxxxxxx>]

>Will this affect any existing passwords?
No it will not affect current passwords, only when assigning a new one thru
the CHGPWD
(Change Password) command or the Client Access Signon Panel.
Passwords changed thru WRKUSRPRF or CHGUSRPRF are not edited against the
system values.
To force everyone to change, set passwords as expired =chgusrprf xxx
pwdexp(*yes) and don't let
the boss keep his old password.

>cracking...
many don't want to talk about this in a public forum...   as far as i know
it's never been cracked,
but some security vendor's products can check if you have easily to guess
passwords (without
cracking), kind of a dictionary match.

suggestion - read the Tips and Tools for Securing Your iSeries  SC41-5300-05
(page 25 has
recommended  System Values to stop stupid passwords (expiration, require
digits, limit repeating
characters, repeating old passwords or similar passwords, etc).
hth
jim


----- Original Message -----
From: <ouuch@t-online.de>
To: "midrange Systems Technical Discussion" <midrange-l@midrange.com>
Sent: Sunday, February 02, 2003 2:58 AM
Subject: Minimum password length


> Hi,
>
> well, our corporate IT headquarters have given out the directive that the
minimum password
> length should be set to 8 characters...
>
> My boss has asked me to set the appropriate OS/400 system value
accordingly. Will this
> affect any existing passwords?
>
> Does anybody know if its possible to crack an OS/400 password, or
manipulate it without
> leaving traces?
>
> If anybody is looking for me in the next hours, I'm rolling on the floor,
laughing...
>
>
> Oliver
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>